Skip Menu |
 

From: ghudson@mit.edu
Subject: git commit

Make etype names in KDC logs human-readable

Introduce enctype_name() as a wrapper over krb5_enctype_to_name for
converting between registered constants and names. Adjust signatures
and rewrite ktypes2str() and rep_etypes2str() to operate on dynamic
buffers.

https://github.com/krb5/krb5/commit/a649279727490687d54becad91fde8cf7429d951
Author: Robbie Harwood <rharwood@redhat.com>
Committer: Greg Hudson <ghudson@mit.edu>
Commit: a649279727490687d54becad91fde8cf7429d951
Branch: master
src/kdc/kdc_log.c | 42 +++++++++---------
src/kdc/kdc_util.c | 125 ++++++++++++++++++++++++++-------------------------
src/kdc/kdc_util.h | 6 +--
3 files changed, 87 insertions(+), 86 deletions(-)
From: ghudson@mit.edu
Subject: git commit

Fix KDC crash when logging PKINIT enctypes

Commit a649279727490687d54becad91fde8cf7429d951 introduced a KDC crash
bug due to transposed strlcpy() arguments. Fix the argument order.

This bug does not affect any MIT krb5 release, but affects the Fedora
krb5 packages due to backports. CVE-2019-14844 has been issued as a
result.

https://github.com/krb5/krb5/commit/c3e62609849ab62caf52fa9b90d9ab60d365a64d
Author: Greg Hudson <ghudson@mit.edu>
Commit: c3e62609849ab62caf52fa9b90d9ab60d365a64d
Branch: master
src/kdc/kdc_util.c | 2 +-
1 files changed, 1 insertions(+), 1 deletions(-)